United States Patent and Trademark Office 



COMlft 
Of«fe 



UNITED STATES DEPARTMENT OF 
United States Patent and Trademark 

Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 


FILING DATE 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO. | 


CONFIRMATION NO. 


10/786,224 


02/26/2004 


Burkhard Kuhls 


080437.53236US 


2832 



11/28/2007 

CROWELL & MORING LLP 
INTELLECTUAL PROPERTY GROUP 
P.O. BOX 14300 
WASHINGTON, DC 20044-4300 



EXAMINER 



JOHNSON, CARLTON 



ART UNIT 



2136 



PAPER NUMBER 



MAIL DATE 



11/28/2007 



DELIVERY MODE 



PAPER 



Please And below and/or attached an Office communication concerning this application or proceeding. 

The time period for reply, if any, is set in the attached communication. 



PTOL-90A (Rev. 04/07) 



1 

Office Action Summary 


Application No. 

10/786,224 


AppUcant(s) 

KUHLS, BURKHARD 


Carlton V. Johnson 


Art Unit 

2136 





- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 17 September 2007 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-20 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) Q Claim(s) is/are allowed. 

6) E3 Claim(s) 1-20 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) □ Notice of References Cited (PTO-892) 

2) O Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 

Paper No(s)/Mail Date . 



4) E] Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) [II Notice of Informal Patent Application 

6) □ Other: .. 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 08-06) 



Office Action Summary 



Part of Paper No./Mail Date 20071 1 1 8 



Application/Control Number: 10/786,224 Page 2 

Art Unit: 2136 

DETAILED ACTION 

This action is responding to application papers filed on 2-26-2004. 
Claims 1 - 20 are pending. Claims 2, 7 have been amended. Claims 19, 20 are 
Claims 1, 7, 19 are independent. 

Response to Arguments 

3, Applicant's arguments filed 9/17/2007 have been fully considered but they are not 
persuasive. 

3.1 Applicant argues that the referenced prior art does not disclose, "signing the 
software against falsification", (see Remarks Page 7) ; "checking the signed software 
for integrity" (see Remarks Pages 7, 8) 

The Wong and Drews prior art combination discloses a boot image which is signed 
for security protection, (see Drews col. 1, lines 62-67: pre-boot software, before use by 
local platform (control unit); col. 4, lines 31-38; col. 4, lines 48-54: sign software; utilizing 
private key, PKI technique; col. 2, lines 48-51: software download) The Drews prior art 
discloses the capability to check or verify the signature for software such as a boot 
image, (see Drews col. 4, lines 1-6; col. 4, lines 9-14; col. 4, lines 23-26: verify (check) 
signature with public key (complimentary to private (secret) key), validity check) 

3.2 Applicant argues that the referenced prior art does not disclose, "the boot image is 
signed", (see Remarks Page 8) 

The Wong prior art discloses a boot image for operating system software 
operational within a vehicle, (see Wong col. 7, lines 32-38: boot image operational 



1. 

2. 

new. 
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within vehicle (master control unit)) The Wong and Drews prior art combination 
discloses a boot image, which is digitally signed for security protection. A boot image is 
software before its actual usage to initially load and activate an operating system 
software (for host system or a vehicle), (see Drews col. 1 , lines 62-67: pre-boot 
software, before use by local platform (control unit); col. 4, lines 31-38; col. 4, lines 48- 
54: sign software; utilizing private key, PKI technique; col. 2, lines 48-51: software 
download) 

3.3 Applicant argues "rejection of dependent claims", (see Remarks Page 8) 

The arguments against the dependent claims are based on the arguments against 
the independent claims 1 and 7. Due to the successful responses to the arguments 
against independent claims 1, 7, the arguments against the associated dependent 
claims 2-6 and 8-18 have also been successfully responded to. 

3.4 Applicant argues that the referenced prior art does not disclose, "a clearing code 
site signature certificate, a software signature certificate clearing code data and their 
signature as well as the software and its signature are stored in the control unit", (see 
Remarks Page 9) 

The Wong prior art discloses a control unit operational within a vehicle, (see 
Wong col. 7, lines 32-38 master control unit operational within a vehicle) The Wong 
and Drews prior art combination discloses the management and storage of multiple 
types of certificates within system. The Drews prior art server system discloses the 
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storage of certificates within the storage subsystems, (see Drews col. 4, lines 26-30: 
certificate (public key) stored in persistent storage, local platform (control unit)) 

3.5 Applicant argues that the referenced prior art does not disclose, "specific 
certificates", (see Remarks Page 9) 

A certificate is the combination of a trusted authority for certificate management, 
cryptography key information (public-private keys), and an associated client (user, 
entity). Applicant's invention discloses multiple certificates utilized for the security of 
multiple types of entities (clearing code site, software signature, clearing code data). 
The Wong and Drews prior art combination discloses a set of certificates (certificate 
chain) for multiple types of entities and utilized to provide security type functions, (see 
Drews col. 2, lines 37-66: certificate with associated public-private keys) 

3.6 Applicant argues that the referenced prior art does not disclose, "claims 19, 20". 
(see Remarks Page 9) 

Claims 19, 20 are new claims and the any arguments concerning these particular 
claims and the current grounds of rejection are moot. 

3.7 The examiner has considered the applicant's remarks concerning In a method of 
providing software for use by a control unit of a vehicle, before its use by the control 
unit, the software is signed according to a public-key method against a falsification, 
using the secret or private key of a software signature site. The signed software is 
checked for integrity by using the public key complementary to the secret key of the 
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software signature site. Applicant's arguments have thus been fully analyzed and 
considered but they are not persuasive. 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Wong (5,597,985) and Drews (6,463,535) discloses the applicant's invention including 
disclosures in Remarks dated September 17, 2007. 

Claim Rejections - 35USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

5. Claims 1-20 are rejected under 35 U.S.C. 103 (a) as being unpatentable over 
Wong et al. (US Patent No. 5,957,985) in view of Drews et al. (US Patent No. 
6,463,535). 

Regarding Claim 1, Wong discloses: 

a method comprising providing software for use by a control unit of a vehicle, (see 
Wong col. 2, lines 21-29; col. 4, line 64 - col. 5, line 8; col. 7, lines 35-39: software 
for vehicle control unit) Wong does not specifically disclose signing the software 
against falsification, using a secret or private key of a software signature site, and 
checking the signed software for integrity. 
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However, Drews discloses: 

a) before its use by the control unit, signing the software against falsification, using 
a secret or private key of a software signature site, according to a public-key 
method; (see Drews col. 1, lines 62-67: pre-boot software, before use by local 
platform (control unit); col. 4, lines 48-54: sign software; utilizing private key, PKI 
technique; col. 2, lines 48-51: software download) and 

b) checking the signed software for integrity, using a public key complementary to 
the secret key of the software signature site, (see Drews col. 4, lines 1-6; col. 4, 
lines 9-14; col. 4, lines 23-26: verify (check) signature with public key 
(complimentary to private (secret) key), validity check) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for signing the software against falsification, 
and checking the signed software for integrity. One of ordinary skill in the art would 
have been motivated to employ the teachings of Drews in order to enable the 
capability to ensure the integrity and authenticity of a software image before 
execution, (see Drews col. 1, lines 53-59: "... Unfortunately, there is currently no 
security scheme to ensure the integrity of the boot image (e.g., check that the 
software is free from viruses or has not been tampered with before or during 
download) as well as its authenticity (e.g., check that the boot image originated from 
its proper source). The present invention provides a scheme that overcomes these 
security flaws. . . . ") 
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Regarding Claim 2, Wong discloses the method according to claim 1 . (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose generating a software signature certificate, using the public key of 
the software signature site and a secret key of a control entity. However, Drews 
discloses wherein further comprising generating a software signature certificate, using 
the public key of the software signature site and a secret key of a control entity of a trust 
center, according to a public-key method, (see Drews col. 4, lines 48-54: signature 
generated; col. 4, lines 15-18; col. 4, lines 20-23: digital certificate for software) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability to generate a software signature certificate, 
using the public key of the software signature site and a secret key of a control entity, 
using a secret or private key of a software signature site, and checking the signed 
software for integrity. One of ordinary skill in the art would have been motivated to 
employ the teachings of Drews in order to enable the capability to ensure the integrity 
and authenticity of a software image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 3, Wong discloses the method according to claim 1 . (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose a control entity certificate and a trust center certificate is generated 
according to a public-key method by using the secret key of the control entity. 
However, Drews discloses wherein one of a control entity certificate and a trust center 
certificate is generated according to a public-key method by using the secret key of the 
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control entity, (see Drews col. 4, lines 26-30: authorization certificate(s), trust center 
(manufacturer), and control (local platform); col. 4, lines 48-54: sign using private 
(secret) key) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for a control entity certificate and a trust center 
certificate is generated according to a public-key method by using the secret key of the 
control entity. One of ordinary skill in the art would have been motivated to employ the 
teachings of Drews in order to enable the capability to ensure the integrity and 
authenticity of a software image before execution, (see Drews col. 1 , lines 53-59) 

Regarding Claim 4, Wong discloses the method according to claim 1. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: vehicle control unit) Wong does not 
specifically disclose clearing code data are signed using a secret key of a clearing code 
site according to a public key method. However, Drews discloses wherein clearing 
code data are signed using a secret key of a clearing code site according to a public key 
method, (see Drews col. 4, lines 48-54: software (clearing code) signed using private 
(secret) key of manufacturer) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for clearing code data are signed using a 
secret key of a clearing code site according to a public key method. One of ordinary 
skill in the art would have been motivated to employ the teachings of Drews in order to 
enable the capability to ensure the integrity and authenticity of a software image before 
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execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 5, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
disclose a clearing code site signature certificate is generated using the secret key of 
the control entity of the trust center according to a public-key method. However, Drews 
discloses wherein a clearing code site signature certificate is generated using the secret 
key of the control entity of the trust center according to a public-key method, (see 
Drews col. 4, lines 26-30: multiple authorization certificates, manufacture (trust center), 
and local platform (control unit)) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for the clearing code site signature certificate to 
be generated using the secret key of the control entity of the trust center according to a 
public-key method. One of ordinary skill in the art would have been motivated to 
employ the teachings of Drews in order to enable the capability to ensure the integrity 
and authenticity of a software image before execution, (see Drews col. 1 , lines 53-59) 

Regarding Claim 6, Wong discloses the method according to claim 3. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the trust center certificate is protected against falsification and 
exchange, in a protected memory area in the control unit. However, Drews discloses 
wherein the trust center certificate is protected against falsification and exchange, in a 
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protected memory area in the control unit, (see Drews col. 3, lines 50-63: protected 
storage (memory, write restricted)) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for the trust center certificate is protected 
against falsification and exchange, in a protected memory area in the control unit. One 
of ordinary skill in the art would have been motivated to employ the teachings of Drews 
in order to enable the capability to ensure the integrity and authenticity of a software 
image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 7, Wong discloses a method of providing software for use by a 

control unit of a vehicle, said method comprising: 

a control unit of a vehicle, (see Wong col. 2, lines 21-29; col. 7, lines 32-38; col. 4, 
line 64 - col. 5, line 8: control unit for vehicle, control unit, boot image) Wong does 
not specifically disclose the clearing code site signature certificate, the software 
signature certificate, the clearing code data and their signature as well as the 
software and its signature are stored in the control unit. 
However, Drews discloses: 

a) before its use by the control unit, signing the software against falsification, using 
a secret or private key of a software signature site, according to a public-key 
method; (see Drews col. 1, lines 62-67: pre-boot software, before use by local 
platform (control unit), signed boot image is software signed before usage; col. 4, 
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lines 31-38; col. 4, lines 48-54: sign software (boot image) before usage, using 
public/private key) and 

b) checking the signed software for integrity, using a public key complementary to 
the secret key of the software signature site, (see Drews col. 2, lines 32-35; col. 
4, lines 9-14: verify (integrity check) utilizing public key in certificate) 

c) wherein a clearing code site signature certificate, a software signature certificate, 
the clearing code data and their signature as well as the software and its 
signature are stored in the control unit, (see Drews col. 4, lines 26-30: certificate 
(public key) stored in persistent storage, local platform (control unit); col. 3, lines 
50-63: software stored in local platform (control unit) memory; col. 4, lines 26-30: 
multiple certificates, (clearing code, trust center, manufacturer)) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews for the clearing code site signature certificate, the software 
signature certificate, the clearing code data and their signature as well as the 
software and its signature are stored in the control unit. One of ordinary skill in the 
art would have been motivated to employ the teachings of Drews in order to enable 
the capability to ensure the integrity and authenticity of a software image before 
execution, (see Drews col. 1 , lines 53-59) 

Regarding Claim 8, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose software signature certificate includes at least one validity 
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restriction. However, Drews discloses wherein the software signature certificate 
includes at least one validity restriction, (see Drews col. 4, lines 9-14: boot image 
provided by acceptable source (validity restriction)) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for a software signature certificate including at 
least one validity restriction. One of ordinary skill in the art would have been motivated 
to employ the teachings of Drews in order to enable the capability to ensure the integrity 
and authenticity of a software image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 9, Wong discloses the method according to claim 5. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the clearing code site signature certificate includes at least one 
validity restriction, a restriction to a particular control unit which is designated by means 
of an identification number stored in the control unit in an invariable manner, and a 
restriction to a vehicle identification number of a particular vehicle. However, Drews 
discloses wherein the clearing code site signature certificate includes at least one 
validity restriction, a restriction to a particular control unit which is designated by means 
of an identification number stored in the control unit in an invariable manner, and a 
restriction to a vehicle identification number of a particular vehicle, (see Drews col. 2, 
line 59 - col. 3, line 3: serial number linked to manufacturer; col. 3, lines 50-63: write 
protected storage area; col. 4, lines 9-14: validity restriction) 
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It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for the clearing code site signature certificate 
includes at least one validity restriction, a restriction to a particular control unit which is 
designated by means of an identification number stored in the control unit in an 
invariable manner, and a restriction to a vehicle identification number of a particular 
vehicle. One of ordinary skill in the art would have been motivated to employ the 
teachings of Drews in order to enable the capability to ensure the integrity and 
authenticity of a software image before execution, (see Drews col. 1 , lines 53-59) 

Regarding Claim 10, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the software signature certificate is checked for integrity according 
to a public-key method, using a public key of the trust center. However, Drews 
discloses wherein the software signature certificate is checked for integrity according to 
a public-key method, using a public key of the trust center, (see Drews col. 2, lines 59- 
66: public key techniques; col. 4, lines 20-23: trust center, provide software; col. 2, lines 
32-35; col. 4, lines 1-6: verify (integrity check)) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability for the software signature certificate is checked 
for integrity according to a public-key method, using a public key of the trust center. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Drews in order to enable the capability to ensure the integrity and authenticity of a 
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software image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 11, Wong discloses the method according to claim 2. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the signed software is checked for integrity according to a public 
key method, using the public key of the software signature site contained in the software 
signature certificate. However, Drews discloses wherein the signed software is 
checked for integrity according to a public key method, using the public key of the 
software signature site contained in the software signature certificate, (see Drews col. 
2, lines 32-35; col. 5, lines 46-49: integrity checked, public key utilized) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability that the signed software is checked for integrity 
according to a public key method, using the public key of the software signature site 
contained in the software signature certificate. One of ordinary skill in the art would 
have been motivated to employ the teachings of Drews in order to enable the capability 
to ensure the integrity and authenticity of a software image before execution, (see 
Drews col. 1, lines 53-59) 

Regarding Claim 12, Wong discloses the method according to claim 5. (see Wong 
col. 2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the clearing code site signature certificate is checked for integrity 
according to a public key method, using a public key of the trust center. However, 
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Drews discloses wherein the clearing code site signature certificate is checked for 
integrity according to a public key method, using a public key of the trust center, (see 
Drews col. 2, lines 59-66: public key techniques; col. 2, lines 32-35; col. 4, lines 9-14: 
verify (integrity check), software from trusted source) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews to enable the capability whereby the clearing code site signature 
certificate is checked for integrity according to a public key method, using a public key 
of the trust center. One of ordinary skill in the art would have been motivated to employ 
the teachings of Drews in order to enable the capability to ensure the integrity and 
authenticity of a software image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 13, Wong discloses the method according to claim 4. (see Wong col. 
2, lines 21-29; col. 4, line 64 - col. 5, line 8: control unit for vehicle) Wong does not 
specifically disclose the signed clearing code data are checked for integrity according to 
a public key method, using a public key of the clearing code site contained in the 
clearing code site signature certificate. However, Drews discloses wherein the signed 
clearing code data are checked for integrity according to a public key method, using a 
public key of the clearing code site contained in the clearing code site signature 
certificate, (see Drews col. 2, lines 57-67: public key within certificate; col. 2, lines 32- 
35; col. 4, lines 9-14: verify (integrity check) utilizing public key in certificate) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews for the signed clearing code data are checked for integrity according to 
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a public key method. One of ordinary skill in the art would have been motivated to 
employ the teachings of Drews in order to enable the capability to ensure the integrity 
and authenticity of a software image before execution, (see Drews col. 1, lines 53-59) 

Regarding Claim 14, Wong discloses the method according to claim 1, wherein the 
control unit is equipped with a sequence-controlled microprocessor that implements one 
of the above-described methods, (see Wong col. 2, lines 21-29: vehicle processor 
(microprocessor)) 

Regarding Claim 15, Wong discloses a control unit for a motor vehicle, which 
implements a method according to claim 1. (see Wong col. 2, lines 21-29; col. 4, line 64 
- col. 5, line 8; col. 7, lines 35-39: control unit, vehicle) 

Regarding Claim 16, Wong discloses a data processing system for a motor vehicle, 
which implements a method according to claim 1. (see Wong col. 4, line 64 - col. 5, line 
8; col. 7, lines 35-39: computer, data processing system) 

Regarding Claim 17, Wong discloses a computer program product sequence control of 
a data processing system of a motor vehicle or motorcycle, which implements the 
method according to claim 1 . (see Wong col. 4, line 64 - col. 5, line 8; col. 7, lines 35- 
39: computer, data processing system, vehicle) 
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Regarding Claim 18, Wong discloses a data carrier, comprising a computer program 
product according to claim 17. (see Wong col. 4, line 64 - col. 5, line 8; col. 7, lines 35- 
39: software (computer program product) implementation means) 

Regarding Claim 19, Wong discloses a method of providing software for use by a 
control unit of a vehicle, said method comprising: 

the control unit (see Wong col. 7, lines 32-38: control unit, vehicle) 

Wong does not specifically disclose whereby storing certificates, receiving signed 

software, checking signed software. 

However, Drews discloses: 

a) storing, a software signature certificate; receiving, signed software; (see Drews 
col. 4, lines 26-30: storage certificates; col. 4, lines 31-38: signed software) 

b) checking, whether the software signature certificate has been changed or 
manipulated; (see Drews col. 3, lines 18-24; col. 4, lines 1-6: verify (check) 
signature) and 

c) checking, whether the signed software has been changed or manipulated, (see 
Drews col. 3, lines 18-24; col. 4, lines 1-6: verification signed software) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews for storing certificates, receiving signed software, and checking 
signed software. One of ordinary skill in the art would have been motivated to 
employ the teachings of Drews in order to enable the capability to ensure the 
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integrity and authenticity of a software image before execution, (see Drews col. 1 , 
lines 53-59) 

Regarding Claim 20, Wong discloses the method of claim 19, further comprising: 
the control unit (see Wong col. 7, lines 32-38: control unit, vehicle) 
Wong does not specifically disclose whereby storing certificates and keys associated 
with certificates. 
However, Drews discloses: 

a) storing, a trust center certificate that includes a public key and a signature 
generated using a secret key of a trust center; (see Drews col. 4, lines 26-30: 
certificate (public key) stored in persistent storage, local platform (control unit)) 
and 

b) storing, a clearing code site signature certificate that includes a second public 
key and a second signature, (see Drews col. 4, lines 26-30: certificate (public 
key) stored in persistent storage, local platform (control unit)) 

c) wherein the software signature certificate includes a third public key and a third 
signature, (see Drews col. 2, lines 37-66: certificate, associated public-private 
keys) 

It would have been obvious to one of ordinary skill in the art to modify Wong as 
taught by Drews for storing certificates and keys associated with certificates. One 
of ordinary skill in the art would have been motivated to employ the teachings of 
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Drews in order to enable the capability to ensure the integrity and authenticity of a 
software image before execution, (see Drews col. 1, lines 53-59) 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Carlton V. Johnson 

Examiner 

Art Unit 2136 



November 13, 2007 
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